@caretcms/core 0.2.0 → 0.4.0

package/dist/runtime/deployment-status.js

@@ -0,0 +1,57 @@
+const MAX_TEXT = 512;
+function cleanText(value) {
+    return typeof value === "string" && value.trim()
+        ? value.trim().slice(0, MAX_TEXT)
+        : undefined;
+}
+function validBuildUrl(value) {
+    const text = cleanText(value);
+    if (!text)
+        return undefined;
+    try {
+        const url = new URL(text);
+        return url.protocol === "https:" || url.protocol === "http:" ? url.href : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** True when provider evidence proves the target revision was in the build. */
+export function deploymentCoversTarget(target, deployed) {
+    if (!deployed)
+        return false;
+    if (target.commit && deployed.commit === target.commit)
+        return true;
+    if (target.published.length === 0)
+        return false;
+    const revisions = new Map(deployed.published.map(entry => [`${entry.collection}::${entry.id}`, entry]));
+    return target.published.every(targetEntry => {
+        const evidence = revisions.get(`${targetEntry.collection}::${targetEntry.id}`);
+        return Boolean(evidence && evidence.revision >= targetEntry.revision);
+    });
+}
+export function normalizeDeploymentEvidence(target, evidence, checkedAt = Date.now()) {
+    const buildId = cleanText(evidence.buildId) ?? null;
+    const buildUrl = validBuildUrl(evidence.buildUrl);
+    const message = cleanText(evidence.message);
+    if (!["deploying", "live", "failed"].includes(evidence.state)) {
+        return { configured: true, state: "unknown", buildId, target, checkedAt,
+            message: "Deployment provider returned an invalid state" };
+    }
+    if (evidence.state === "live" && (!buildId || !deploymentCoversTarget(target, evidence.deployed))) {
+        return { configured: true, state: "unknown", buildId, target, checkedAt,
+            message: buildId
+                ? "The live build did not prove it contains this published revision"
+                : "The live deployment did not include a build identity" };
+    }
+    return {
+        configured: true,
+        state: evidence.state,
+        buildId,
+        ...(buildUrl ? { buildUrl } : {}),
+        ...(message ? { message } : {}),
+        target,
+        checkedAt,
+    };
+}
+//# sourceMappingURL=deployment-status.js.map

package/dist/runtime/deployment-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-status.js","sourceRoot":"","sources":["../../src/runtime/deployment-status.ts"],"names":[],"mappings":"AAMA,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAC9C,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CACpC,MAAwB,EACxB,QAAoC;IAEpC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,UAAU,KAAK,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAYD,MAAM,UAAU,2BAA2B,CACzC,MAAwB,EACxB,QAAkC,EAClC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;IAEtB,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;YACrE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;YACrE,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,kEAAkE;gBACpE,CAAC,CAAC,sDAAsD,EAAE,CAAC;IACjE,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO;QACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/runtime/draft-state.d.ts

@@ -0,0 +1,16 @@
+/** Private overlay state. Never accepted from mutation payloads or exposed as content. */
+export declare const DRAFT_STATE_KEY = "__caret_draft__";
+export declare const PUBLISH_RECOVERY_KEY = "__caret_publish__";
+export declare const PRIVATE_ENTRY_KEYS: readonly ["__body", "__caret_tombstone__", "__caret_draft__", "__caret_publish__"];
+export interface DraftState {
+    version: 1;
+    baseRevision: number;
+    baseData: Record<string, unknown> | null;
+    /** Structured saves replace the entry; body-only saves leave frontmatter alone. */
+    structured: boolean;
+}
+export declare function contentWithoutState(data: Record<string, unknown>): Record<string, unknown>;
+export declare function readDraftState(data: Record<string, unknown>): DraftState | null;
+/** Object key ordering is not a content change. Arrays retain their order. */
+export declare function sameContent(a: unknown, b: unknown): boolean;
+//# sourceMappingURL=draft-state.d.ts.map

package/dist/runtime/draft-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-state.d.ts","sourceRoot":"","sources":["../../src/runtime/draft-state.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,kBAAkB,oFAAoF,CAAC;AAEpH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,mFAAmF;IACnF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG1F;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,IAAI,CAM/E;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAO3D"}

package/dist/runtime/draft-state.js

@@ -0,0 +1,29 @@
+/** Private overlay state. Never accepted from mutation payloads or exposed as content. */
+export const DRAFT_STATE_KEY = "__caret_draft__";
+export const PUBLISH_RECOVERY_KEY = "__caret_publish__";
+export const PRIVATE_ENTRY_KEYS = ["__body", "__caret_tombstone__", DRAFT_STATE_KEY, PUBLISH_RECOVERY_KEY];
+export function contentWithoutState(data) {
+    const { [DRAFT_STATE_KEY]: _draft, [PUBLISH_RECOVERY_KEY]: _publish, ...content } = data;
+    return content;
+}
+export function readDraftState(data) {
+    const state = data[DRAFT_STATE_KEY];
+    if (!state || state.version !== 1 || !Number.isSafeInteger(state.baseRevision) || state.baseRevision < 0 ||
+        typeof state.structured !== "boolean" ||
+        (state.baseData !== null && (typeof state.baseData !== "object" || Array.isArray(state.baseData))))
+        return null;
+    return state;
+}
+/** Object key ordering is not a content change. Arrays retain their order. */
+export function sameContent(a, b) {
+    if (a === b)
+        return true;
+    if (a === null || b === null || typeof a !== "object" || typeof b !== "object")
+        return false;
+    if (Array.isArray(a) !== Array.isArray(b))
+        return false;
+    const left = Object.keys(a), right = Object.keys(b);
+    return left.length === right.length && left.every(key => Object.hasOwn(b, key) &&
+        sameContent(a[key], b[key]));
+}
+//# sourceMappingURL=draft-state.js.map

package/dist/runtime/draft-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-state.js","sourceRoot":"","sources":["../../src/runtime/draft-state.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,eAAe,EAAE,oBAAoB,CAAU,CAAC;AAUpH,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC/D,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;IACzF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA6B;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAA2B,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC;QACpG,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;QACrC,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,CAAU;IAChD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC;QAC5E,WAAW,CAAE,CAA6B,CAAC,GAAG,CAAC,EAAG,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC"}

package/dist/runtime/i18n.d.ts

@@ -0,0 +1,97 @@
+export declare const EN_STUDIO_MESSAGES: {
+    readonly "nav.studio": "Studio";
+    readonly "nav.signOut": "Sign out";
+    readonly "home.title": "Content Studio";
+    readonly "home.intro": "Manage your collections and entries.";
+    readonly "home.empty": "No collections yet. Create one from Studio, edit any data-caret element on your site, or run npx @caretcms/caretize to make existing pages editable.";
+    readonly "count.entry": "entry";
+    readonly "count.entries": "entries";
+    readonly "common.error": "Error";
+    readonly "common.loading": "Loading…";
+    readonly "common.close": "Close";
+    readonly "common.cancel": "Cancel";
+    readonly "common.retry": "Retry";
+    readonly "common.saving": "Saving…";
+    readonly "collection.search": "Search";
+    readonly "collection.searchPlaceholder": "Search entries…";
+    readonly "collection.reorder": "Reorder";
+    readonly "collection.reordering": "Reordering…";
+    readonly "collection.new": "+ New";
+    readonly "collection.noEntries": "No entries yet.";
+    readonly "collection.createFirst": "Create First Entry";
+    readonly "collection.failed": "Failed to load entries.";
+    readonly "collection.saveOrder": "Save Order";
+    readonly "collection.newEntry": "New Entry";
+    readonly "collection.entryId": "Entry ID (slug)";
+    readonly "collection.entryIdPlaceholder": "e.g. my-first-entry";
+    readonly "collection.idHint": "Use a permanent internal address such as quiet-structures. Lowercase letters, numbers, and hyphens only.";
+    readonly "collection.publishHint": "You’ll add the content on the next screen. Collections with a Published switch remain hidden until you turn it on and Save.";
+    readonly "collection.create": "Create";
+    readonly "collection.untitled": "Untitled";
+    readonly "collection.published": "Published";
+    readonly "collection.unpublished": "Unpublished";
+    readonly "collection.invalid": "Invalid stored data — open to repair";
+    readonly "collection.invalidId": "Use lowercase letters, numbers, and hyphens only.";
+    readonly "collection.duplicateId": "An entry with this ID already exists.";
+    readonly "collection.createFailed": "Failed to create entry. Try again.";
+    readonly "entry.loadFailed": "Could not load this entry. Check its source or storage and retry.";
+    readonly "entry.unsupported_content": "This entry uses unsupported frontmatter syntax. Update its source format and retry; the file has not been changed.";
+    readonly "entry.invalid_content": "This entry contains invalid content. Correct its source file and retry.";
+    readonly "entry.storage_error": "Could not read this entry from storage. Check storage access and retry.";
+    readonly "collection.previous": "Previous";
+    readonly "collection.next": "Next";
+    readonly "collection.pagination": "Collection pages";
+    readonly "collection.noResults": "No matching entries.";
+    readonly "collection.unreadable": "Cannot read entry — open for details";
+    readonly "collection.range": "{start}–{end} of {total}";
+    readonly "collection.reorderScope": "Reorder is available when all entries are shown on one page without a search filter.";
+    readonly "entry.notFound": "Entry not found.";
+    readonly "entry.goBack": "Go back";
+    readonly "entry.savingLive": "Saving live";
+    readonly "entry.savingPreview": "Saving to private preview";
+    readonly "entry.preview": "Preview site ↗";
+    readonly "entry.history": "History";
+    readonly "entry.delete": "Delete";
+    readonly "entry.saveLive": "Save live";
+    readonly "entry.saveDraft": "Save draft";
+    readonly "entry.guideTitle": "How editing works";
+    readonly "entry.guideCopy": "Edit any field, add or remove repeatable rows, then choose Save. In the sidebar Studio, text and image edits preview on the page as you work; Save confirms them and refreshes the visual preview for structural changes. Click an image preview to replace it, or paste an image URL. When publication is enabled, the Published switch can show or hide the entry without deleting it.";
+    readonly "entry.versionHistory": "Version History";
+    readonly "entry.deleteTitle": "Delete Entry";
+    readonly "entry.deleteCopy": "Permanently delete this entry? A snapshot will be saved to history for recovery.";
+    readonly "entry.allSaved": "All changes saved";
+    readonly "entry.unsaved": "Unsaved changes";
+    readonly "entry.savingChanges": "Saving changes…";
+    readonly "entry.saved": "Saved";
+    readonly "entry.liveConfirm": "Save these changes directly to the live site?";
+    readonly "entry.validationFailed": "Validation failed";
+    readonly "entry.changedElsewhere": "Changed elsewhere — Save again to overwrite";
+    readonly "entry.deleteFailed": "Delete failed";
+    readonly "entry.deleting": "Deleting…";
+    readonly "entry.newGuideTitle": "Entry created with safe defaults";
+    readonly "entry.newGuideCopy": "Fill in the fields below. Save becomes available after your first change. In the sidebar Studio, text and image edits preview on the page as you work; Save confirms them and refreshes the visual preview for structural changes. When publication is enabled, new entries stay private until Published is turned on.";
+    readonly "field.add": "Add";
+    readonly "field.remove": "Remove";
+    readonly "field.moveUp": "Move up";
+    readonly "field.moveDown": "Move down";
+    readonly "field.drag": "Drag to reorder";
+    readonly "field.replaceImage": "Replace image";
+    readonly "field.uploadOrReplaceImage": "Upload or replace image";
+    readonly "field.chooseImage": "Choose an image";
+    readonly "login.title": "Sign in";
+    readonly "login.password": "Password";
+    readonly "login.placeholder": "Enter editor password";
+    readonly "login.submit": "Sign in";
+    readonly "login.invalid": "Invalid password.";
+    readonly "login.status": "Sign in to manage content.";
+    readonly "login.noPassword": "Caret needs an editor password before you can sign in.";
+    readonly "login.devPassword": "Temporary dev password active — check your terminal to sign in.";
+    readonly "login.back": "← Back to site";
+    readonly "login.failed": "Login failed";
+};
+export type StudioMessageKey = keyof typeof EN_STUDIO_MESSAGES;
+export type StudioLocale = "en" | "es";
+export type StudioDictionary = Partial<Record<StudioMessageKey, string>>;
+export type ResolvedStudioDictionary = Record<StudioMessageKey, string>;
+export declare function resolveStudioDictionary(locale?: StudioLocale, overrides?: StudioDictionary): ResolvedStudioDictionary;
+//# sourceMappingURL=i18n.d.ts.map

package/dist/runtime/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../src/runtime/i18n.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0FrB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;AACzE,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AA8FxE,wBAAgB,uBAAuB,CACrC,MAAM,GAAE,YAAmB,EAC3B,SAAS,GAAE,gBAAqB,GAC/B,wBAAwB,CAM1B"}

package/dist/runtime/i18n.js

@@ -0,0 +1,190 @@
+export const EN_STUDIO_MESSAGES = {
+    "nav.studio": "Studio",
+    "nav.signOut": "Sign out",
+    "home.title": "Content Studio",
+    "home.intro": "Manage your collections and entries.",
+    "home.empty": "No collections yet. Create one from Studio, edit any data-caret element on your site, or run npx @caretcms/caretize to make existing pages editable.",
+    "count.entry": "entry",
+    "count.entries": "entries",
+    "common.error": "Error",
+    "common.loading": "Loading…",
+    "common.close": "Close",
+    "common.cancel": "Cancel",
+    "common.retry": "Retry",
+    "common.saving": "Saving…",
+    "collection.search": "Search",
+    "collection.searchPlaceholder": "Search entries…",
+    "collection.reorder": "Reorder",
+    "collection.reordering": "Reordering…",
+    "collection.new": "+ New",
+    "collection.noEntries": "No entries yet.",
+    "collection.createFirst": "Create First Entry",
+    "collection.failed": "Failed to load entries.",
+    "collection.saveOrder": "Save Order",
+    "collection.newEntry": "New Entry",
+    "collection.entryId": "Entry ID (slug)",
+    "collection.entryIdPlaceholder": "e.g. my-first-entry",
+    "collection.idHint": "Use a permanent internal address such as quiet-structures. Lowercase letters, numbers, and hyphens only.",
+    "collection.publishHint": "You’ll add the content on the next screen. Collections with a Published switch remain hidden until you turn it on and Save.",
+    "collection.create": "Create",
+    "collection.untitled": "Untitled",
+    "collection.published": "Published",
+    "collection.unpublished": "Unpublished",
+    "collection.invalid": "Invalid stored data — open to repair",
+    "collection.invalidId": "Use lowercase letters, numbers, and hyphens only.",
+    "collection.duplicateId": "An entry with this ID already exists.",
+    "collection.createFailed": "Failed to create entry. Try again.",
+    "entry.loadFailed": "Could not load this entry. Check its source or storage and retry.",
+    "entry.unsupported_content": "This entry uses unsupported frontmatter syntax. Update its source format and retry; the file has not been changed.",
+    "entry.invalid_content": "This entry contains invalid content. Correct its source file and retry.",
+    "entry.storage_error": "Could not read this entry from storage. Check storage access and retry.",
+    "collection.previous": "Previous",
+    "collection.next": "Next",
+    "collection.pagination": "Collection pages",
+    "collection.noResults": "No matching entries.",
+    "collection.unreadable": "Cannot read entry — open for details",
+    "collection.range": "{start}–{end} of {total}",
+    "collection.reorderScope": "Reorder is available when all entries are shown on one page without a search filter.",
+    "entry.notFound": "Entry not found.",
+    "entry.goBack": "Go back",
+    "entry.savingLive": "Saving live",
+    "entry.savingPreview": "Saving to private preview",
+    "entry.preview": "Preview site ↗",
+    "entry.history": "History",
+    "entry.delete": "Delete",
+    "entry.saveLive": "Save live",
+    "entry.saveDraft": "Save draft",
+    "entry.guideTitle": "How editing works",
+    "entry.guideCopy": "Edit any field, add or remove repeatable rows, then choose Save. In the sidebar Studio, text and image edits preview on the page as you work; Save confirms them and refreshes the visual preview for structural changes. Click an image preview to replace it, or paste an image URL. When publication is enabled, the Published switch can show or hide the entry without deleting it.",
+    "entry.versionHistory": "Version History",
+    "entry.deleteTitle": "Delete Entry",
+    "entry.deleteCopy": "Permanently delete this entry? A snapshot will be saved to history for recovery.",
+    "entry.allSaved": "All changes saved",
+    "entry.unsaved": "Unsaved changes",
+    "entry.savingChanges": "Saving changes…",
+    "entry.saved": "Saved",
+    "entry.liveConfirm": "Save these changes directly to the live site?",
+    "entry.validationFailed": "Validation failed",
+    "entry.changedElsewhere": "Changed elsewhere — Save again to overwrite",
+    "entry.deleteFailed": "Delete failed",
+    "entry.deleting": "Deleting…",
+    "entry.newGuideTitle": "Entry created with safe defaults",
+    "entry.newGuideCopy": "Fill in the fields below. Save becomes available after your first change. In the sidebar Studio, text and image edits preview on the page as you work; Save confirms them and refreshes the visual preview for structural changes. When publication is enabled, new entries stay private until Published is turned on.",
+    "field.add": "Add",
+    "field.remove": "Remove",
+    "field.moveUp": "Move up",
+    "field.moveDown": "Move down",
+    "field.drag": "Drag to reorder",
+    "field.replaceImage": "Replace image",
+    "field.uploadOrReplaceImage": "Upload or replace image",
+    "field.chooseImage": "Choose an image",
+    "login.title": "Sign in",
+    "login.password": "Password",
+    "login.placeholder": "Enter editor password",
+    "login.submit": "Sign in",
+    "login.invalid": "Invalid password.",
+    "login.status": "Sign in to manage content.",
+    "login.noPassword": "Caret needs an editor password before you can sign in.",
+    "login.devPassword": "Temporary dev password active — check your terminal to sign in.",
+    "login.back": "← Back to site",
+    "login.failed": "Login failed",
+};
+const ES_STUDIO_MESSAGES = {
+    "nav.studio": "Estudio",
+    "nav.signOut": "Cerrar sesión",
+    "home.title": "Estudio de contenido",
+    "home.intro": "Administra tus colecciones y entradas.",
+    "home.empty": "Todavía no hay colecciones. Crea una desde el Estudio, edita un elemento data-caret del sitio o ejecuta npx @caretcms/caretize para hacer editables las páginas existentes.",
+    "count.entry": "entrada",
+    "count.entries": "entradas",
+    "common.error": "Error",
+    "common.loading": "Cargando…",
+    "common.close": "Cerrar",
+    "common.cancel": "Cancelar",
+    "common.retry": "Reintentar",
+    "common.saving": "Guardando…",
+    "collection.search": "Buscar",
+    "collection.searchPlaceholder": "Buscar entradas…",
+    "collection.reorder": "Reordenar",
+    "collection.reordering": "Reordenando…",
+    "collection.new": "+ Nueva",
+    "collection.noEntries": "Todavía no hay entradas.",
+    "collection.createFirst": "Crear la primera entrada",
+    "collection.failed": "No se pudieron cargar las entradas.",
+    "collection.saveOrder": "Guardar orden",
+    "collection.newEntry": "Nueva entrada",
+    "collection.entryId": "ID de la entrada (slug)",
+    "collection.entryIdPlaceholder": "p. ej., mi-primera-entrada",
+    "collection.idHint": "Usa una dirección interna permanente como estructuras-tranquilas. Solo letras minúsculas, números y guiones.",
+    "collection.publishHint": "Agregarás el contenido en la siguiente pantalla. Las entradas con el interruptor Publicado permanecen ocultas hasta que lo actives y guardes.",
+    "collection.create": "Crear",
+    "collection.untitled": "Sin título",
+    "collection.published": "Publicado",
+    "collection.unpublished": "Sin publicar",
+    "collection.invalid": "Datos guardados no válidos — abre para corregir",
+    "collection.invalidId": "Usa solo letras minúsculas, números y guiones.",
+    "collection.duplicateId": "Ya existe una entrada con este ID.",
+    "collection.createFailed": "No se pudo crear la entrada. Inténtalo de nuevo.",
+    "entry.loadFailed": "No se pudo cargar la entrada. Revisa el archivo o el almacenamiento y reintenta.",
+    "entry.unsupported_content": "El formato de metadatos de esta entrada no es compatible. Corrige el archivo y reintenta; no se ha modificado.",
+    "entry.invalid_content": "Esta entrada contiene datos no válidos. Corrige el archivo y reintenta.",
+    "entry.storage_error": "No se pudo leer esta entrada. Revisa el acceso al almacenamiento y reintenta.",
+    "collection.previous": "Anterior",
+    "collection.next": "Siguiente",
+    "collection.pagination": "Páginas de la colección",
+    "collection.noResults": "No hay entradas que coincidan.",
+    "collection.unreadable": "No se puede leer — abre para ver detalles",
+    "collection.range": "{start}–{end} de {total}",
+    "collection.reorderScope": "Solo se puede reordenar cuando todas las entradas aparecen en una página sin filtros.",
+    "entry.notFound": "No se encontró la entrada.",
+    "entry.goBack": "Volver",
+    "entry.savingLive": "Guardado directo en el sitio",
+    "entry.savingPreview": "Guardado en vista previa privada",
+    "entry.preview": "Ver sitio ↗",
+    "entry.history": "Historial",
+    "entry.delete": "Eliminar",
+    "entry.saveLive": "Guardar en vivo",
+    "entry.saveDraft": "Guardar borrador",
+    "entry.guideTitle": "Cómo funciona la edición",
+    "entry.guideCopy": "Edita cualquier campo, agrega o elimina filas repetibles y luego guarda. En el Estudio lateral, los cambios de texto e imagen aparecen mientras trabajas; Guardar los confirma y actualiza la vista para los cambios estructurales. Haz clic en una imagen para reemplazarla o pega una URL. Cuando la publicación está habilitada, el interruptor Publicado muestra u oculta la entrada sin eliminarla.",
+    "entry.versionHistory": "Historial de versiones",
+    "entry.deleteTitle": "Eliminar entrada",
+    "entry.deleteCopy": "¿Eliminar esta entrada permanentemente? Se guardará una copia en el historial para poder recuperarla.",
+    "entry.allSaved": "Todos los cambios están guardados",
+    "entry.unsaved": "Cambios sin guardar",
+    "entry.savingChanges": "Guardando cambios…",
+    "entry.saved": "Guardado",
+    "entry.liveConfirm": "¿Guardar estos cambios directamente en el sitio público?",
+    "entry.validationFailed": "La validación falló",
+    "entry.changedElsewhere": "Hubo cambios en otro lugar — vuelve a guardar para sobrescribir",
+    "entry.deleteFailed": "No se pudo eliminar",
+    "entry.deleting": "Eliminando…",
+    "entry.newGuideTitle": "Entrada creada con valores seguros",
+    "entry.newGuideCopy": "Completa los campos. Guardar estará disponible después del primer cambio. En el Estudio lateral, los cambios de texto e imagen aparecen mientras trabajas; Guardar los confirma y actualiza la vista para los cambios estructurales. Cuando la publicación está habilitada, las entradas nuevas permanecen privadas hasta activar Publicado.",
+    "field.add": "Agregar",
+    "field.remove": "Eliminar",
+    "field.moveUp": "Mover arriba",
+    "field.moveDown": "Mover abajo",
+    "field.drag": "Arrastrar para reordenar",
+    "field.replaceImage": "Reemplazar imagen",
+    "field.uploadOrReplaceImage": "Subir o reemplazar imagen",
+    "field.chooseImage": "Elegir una imagen",
+    "login.title": "Iniciar sesión",
+    "login.password": "Contraseña",
+    "login.placeholder": "Ingresa la contraseña de edición",
+    "login.submit": "Iniciar sesión",
+    "login.invalid": "Contraseña incorrecta.",
+    "login.status": "Inicia sesión para administrar el contenido.",
+    "login.noPassword": "Caret necesita una contraseña de edición antes de iniciar sesión.",
+    "login.devPassword": "La contraseña temporal de desarrollo está activa — consúltala en la terminal.",
+    "login.back": "← Volver al sitio",
+    "login.failed": "No se pudo iniciar sesión",
+};
+export function resolveStudioDictionary(locale = "en", overrides = {}) {
+    return {
+        ...EN_STUDIO_MESSAGES,
+        ...(locale === "es" ? ES_STUDIO_MESSAGES : {}),
+        ...overrides,
+    };
+}
+//# sourceMappingURL=i18n.js.map

package/dist/runtime/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../../src/runtime/i18n.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE,QAAQ;IACtB,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,sCAAsC;IACpD,YAAY,EAAE,sJAAsJ;IACpK,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,UAAU;IAC5B,cAAc,EAAE,OAAO;IACvB,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,OAAO;IACvB,eAAe,EAAE,SAAS;IAC1B,mBAAmB,EAAE,QAAQ;IAC7B,8BAA8B,EAAE,iBAAiB;IACjD,oBAAoB,EAAE,SAAS;IAC/B,uBAAuB,EAAE,aAAa;IACtC,gBAAgB,EAAE,OAAO;IACzB,sBAAsB,EAAE,iBAAiB;IACzC,wBAAwB,EAAE,oBAAoB;IAC9C,mBAAmB,EAAE,yBAAyB;IAC9C,sBAAsB,EAAE,YAAY;IACpC,qBAAqB,EAAE,WAAW;IAClC,oBAAoB,EAAE,iBAAiB;IACvC,+BAA+B,EAAE,qBAAqB;IACtD,mBAAmB,EAAE,0GAA0G;IAC/H,wBAAwB,EAAE,6HAA6H;IACvJ,mBAAmB,EAAE,QAAQ;IAC7B,qBAAqB,EAAE,UAAU;IACjC,sBAAsB,EAAE,WAAW;IACnC,wBAAwB,EAAE,aAAa;IACvC,oBAAoB,EAAE,sCAAsC;IAC5D,sBAAsB,EAAE,mDAAmD;IAC3E,wBAAwB,EAAE,uCAAuC;IACjE,yBAAyB,EAAE,oCAAoC;IAC/D,kBAAkB,EAAE,mEAAmE;IACvF,2BAA2B,EAAE,oHAAoH;IACjJ,uBAAuB,EAAE,yEAAyE;IAClG,qBAAqB,EAAE,yEAAyE;IAChG,qBAAqB,EAAE,UAAU;IACjC,iBAAiB,EAAE,MAAM;IACzB,uBAAuB,EAAE,kBAAkB;IAC3C,sBAAsB,EAAE,sBAAsB;IAC9C,uBAAuB,EAAE,sCAAsC;IAC/D,kBAAkB,EAAE,0BAA0B;IAC9C,yBAAyB,EAAE,sFAAsF;IACjH,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,SAAS;IACzB,kBAAkB,EAAE,aAAa;IACjC,qBAAqB,EAAE,2BAA2B;IAClD,eAAe,EAAE,gBAAgB;IACjC,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,QAAQ;IACxB,gBAAgB,EAAE,WAAW;IAC7B,iBAAiB,EAAE,YAAY;IAC/B,kBAAkB,EAAE,mBAAmB;IACvC,iBAAiB,EAAE,0XAA0X;IAC7Y,sBAAsB,EAAE,iBAAiB;IACzC,mBAAmB,EAAE,cAAc;IACnC,kBAAkB,EAAE,kFAAkF;IACtG,gBAAgB,EAAE,mBAAmB;IACrC,eAAe,EAAE,iBAAiB;IAClC,qBAAqB,EAAE,iBAAiB;IACxC,aAAa,EAAE,OAAO;IACtB,mBAAmB,EAAE,+CAA+C;IACpE,wBAAwB,EAAE,mBAAmB;IAC7C,wBAAwB,EAAE,6CAA6C;IACvE,oBAAoB,EAAE,eAAe;IACrC,gBAAgB,EAAE,WAAW;IAC7B,qBAAqB,EAAE,kCAAkC;IACzD,oBAAoB,EAAE,wTAAwT;IAC9U,WAAW,EAAE,KAAK;IAClB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,SAAS;IACzB,gBAAgB,EAAE,WAAW;IAC7B,YAAY,EAAE,iBAAiB;IAC/B,oBAAoB,EAAE,eAAe;IACrC,4BAA4B,EAAE,yBAAyB;IACvD,mBAAmB,EAAE,iBAAiB;IACtC,aAAa,EAAE,SAAS;IACxB,gBAAgB,EAAE,UAAU;IAC5B,mBAAmB,EAAE,uBAAuB;IAC5C,cAAc,EAAE,SAAS;IACzB,eAAe,EAAE,mBAAmB;IACpC,cAAc,EAAE,4BAA4B;IAC5C,kBAAkB,EAAE,wDAAwD;IAC5E,mBAAmB,EAAE,iEAAiE;IACtF,YAAY,EAAE,gBAAgB;IAC9B,cAAc,EAAE,cAAc;CACtB,CAAC;AAOX,MAAM,kBAAkB,GAAqB;IAC3C,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,sBAAsB;IACpC,YAAY,EAAE,wCAAwC;IACtD,YAAY,EAAE,6KAA6K;IAC3L,aAAa,EAAE,SAAS;IACxB,eAAe,EAAE,UAAU;IAC3B,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,WAAW;IAC7B,cAAc,EAAE,QAAQ;IACxB,eAAe,EAAE,UAAU;IAC3B,cAAc,EAAE,YAAY;IAC5B,eAAe,EAAE,YAAY;IAC7B,mBAAmB,EAAE,QAAQ;IAC7B,8BAA8B,EAAE,kBAAkB;IAClD,oBAAoB,EAAE,WAAW;IACjC,uBAAuB,EAAE,cAAc;IACvC,gBAAgB,EAAE,SAAS;IAC3B,sBAAsB,EAAE,0BAA0B;IAClD,wBAAwB,EAAE,0BAA0B;IACpD,mBAAmB,EAAE,qCAAqC;IAC1D,sBAAsB,EAAE,eAAe;IACvC,qBAAqB,EAAE,eAAe;IACtC,oBAAoB,EAAE,yBAAyB;IAC/C,+BAA+B,EAAE,4BAA4B;IAC7D,mBAAmB,EAAE,8GAA8G;IACnI,wBAAwB,EAAE,+IAA+I;IACzK,mBAAmB,EAAE,OAAO;IAC5B,qBAAqB,EAAE,YAAY;IACnC,sBAAsB,EAAE,WAAW;IACnC,wBAAwB,EAAE,cAAc;IACxC,oBAAoB,EAAE,iDAAiD;IACvE,sBAAsB,EAAE,gDAAgD;IACxE,wBAAwB,EAAE,oCAAoC;IAC9D,yBAAyB,EAAE,kDAAkD;IAC7E,kBAAkB,EAAE,kFAAkF;IACtG,2BAA2B,EAAE,gHAAgH;IAC7I,uBAAuB,EAAE,yEAAyE;IAClG,qBAAqB,EAAE,+EAA+E;IACtG,qBAAqB,EAAE,UAAU;IACjC,iBAAiB,EAAE,WAAW;IAC9B,uBAAuB,EAAE,yBAAyB;IAClD,sBAAsB,EAAE,gCAAgC;IACxD,uBAAuB,EAAE,2CAA2C;IACpE,kBAAkB,EAAE,0BAA0B;IAC9C,yBAAyB,EAAE,uFAAuF;IAClH,gBAAgB,EAAE,4BAA4B;IAC9C,cAAc,EAAE,QAAQ;IACxB,kBAAkB,EAAE,8BAA8B;IAClD,qBAAqB,EAAE,kCAAkC;IACzD,eAAe,EAAE,aAAa;IAC9B,eAAe,EAAE,WAAW;IAC5B,cAAc,EAAE,UAAU;IAC1B,gBAAgB,EAAE,iBAAiB;IACnC,iBAAiB,EAAE,kBAAkB;IACrC,kBAAkB,EAAE,0BAA0B;IAC9C,iBAAiB,EAAE,0YAA0Y;IAC7Z,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,kBAAkB;IACvC,kBAAkB,EAAE,uGAAuG;IAC3H,gBAAgB,EAAE,mCAAmC;IACrD,eAAe,EAAE,qBAAqB;IACtC,qBAAqB,EAAE,oBAAoB;IAC3C,aAAa,EAAE,UAAU;IACzB,mBAAmB,EAAE,0DAA0D;IAC/E,wBAAwB,EAAE,qBAAqB;IAC/C,wBAAwB,EAAE,iEAAiE;IAC3F,oBAAoB,EAAE,qBAAqB;IAC3C,gBAAgB,EAAE,aAAa;IAC/B,qBAAqB,EAAE,oCAAoC;IAC3D,oBAAoB,EAAE,8UAA8U;IACpW,WAAW,EAAE,SAAS;IACtB,cAAc,EAAE,UAAU;IAC1B,cAAc,EAAE,cAAc;IAC9B,gBAAgB,EAAE,aAAa;IAC/B,YAAY,EAAE,0BAA0B;IACxC,oBAAoB,EAAE,mBAAmB;IACzC,4BAA4B,EAAE,2BAA2B;IACzD,mBAAmB,EAAE,mBAAmB;IACxC,aAAa,EAAE,gBAAgB;IAC/B,gBAAgB,EAAE,YAAY;IAC9B,mBAAmB,EAAE,kCAAkC;IACvD,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE,8CAA8C;IAC9D,kBAAkB,EAAE,mEAAmE;IACvF,mBAAmB,EAAE,+EAA+E;IACpG,YAAY,EAAE,mBAAmB;IACjC,cAAc,EAAE,2BAA2B;CAC5C,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACrC,SAAuB,IAAI,EAC3B,YAA8B,EAAE;IAEhC,OAAO;QACL,GAAG,kBAAkB;QACrB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC"}

package/dist/runtime/index.d.ts

@@ -6,6 +6,7 @@
 export { bindEntry } from "./bind.js";
 export { loadEntry, loadCollection, listCollections } from "./content.js";
 export type { EntryData } from "./content.js";
+export { isPublicEntry, isPublishedEntry } from "./collection-policy.js";
 export { SessionOverlayAdapter } from "./storage/session-overlay-adapter.js";
 export { QuotaUploadHandler } from "./storage/quota-upload-handler.js";
 export type { QuotaCounter, QuotaUploadHandlerOptions, } from "./storage/quota-upload-handler.js";

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,YAAY,EACV,YAAY,EACZ,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAI3C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,YAAY,EACV,YAAY,EACZ,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAI3C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/runtime/index.js

@@ -7,6 +7,7 @@
 export { bindEntry } from "./bind.js";
 // Content loading — read stored data in .astro frontmatter (power-user API)
 export { loadEntry, loadCollection, listCollections } from "./content.js";
+export { isPublicEntry, isPublishedEntry } from "./collection-policy.js";
 // Sandbox / multi-tenant primitives — used by Cloudflare adapter for demo mode
 export { SessionOverlayAdapter } from "./storage/session-overlay-adapter.js";
 export { QuotaUploadHandler } from "./storage/quota-upload-handler.js";

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6DAA6D;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,4EAA4E;AAC5E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG1E,+EAA+E;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAMvE,+DAA+D;AAC/D,wEAAwE;AACxE,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6DAA6D;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,4EAA4E;AAC5E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,+EAA+E;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAMvE,+DAA+D;AAC/D,wEAAwE;AACxE,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC"}

package/dist/runtime/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/runtime/middleware.ts"],"names":[],"mappings":"AAUA,OAAO,0BAA0B,CAAC;AAElC,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;KACtD,CAAC;IACF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAqFF,KAAK,cAAc,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE9C,wBAAsB,SAAS,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,QAAQ,CAAC,CAoJnB"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/runtime/middleware.ts"],"names":[],"mappings":"AAWA,OAAO,0BAA0B,CAAC;AAElC,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;KACtD,CAAC;IACF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAqFF,KAAK,cAAc,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;AA4B9C,wBAAsB,SAAS,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,QAAQ,CAAC,CAiLnB"}

package/dist/runtime/middleware.js

@@ -5,6 +5,7 @@ import { runWithRequestContext } from "./request-context.js";
 import { rewriteCaretAttributes } from "./rewrite.js";
 import { hasStega, stegaClean } from "./stega.js";
 import { SessionOverlayAdapter } from "./storage/session-overlay-adapter.js";
+import { EDITOR_ID_RE } from "./storage/id-contracts.js";
 // Side-effect import: registers any user-provided schemas into the schema registry
 import "virtual:caretcms/schemas";
 let _cachedRuntimeEnv;
@@ -77,9 +78,35 @@ async function resolveRuntimeEnv() {
     }
     return _cachedRuntimeEnv;
 }
+async function authenticateIdentity(adapter, request) {
+    if (!adapter)
+        return null;
+    try {
+        const identity = await adapter.authenticate(request);
+        if (!identity)
+            return null;
+        if (!EDITOR_ID_RE.test(identity.id)) {
+            console.error("[caretcms] Identity adapter returned an unsafe editor id; access denied.");
+            return null;
+        }
+        return {
+            id: identity.id,
+            ...(typeof identity.name === "string" ? { name: identity.name } : {}),
+            ...(typeof identity.email === "string" ? { email: identity.email } : {}),
+            ...(Array.isArray(identity.roles)
+                ? { roles: identity.roles.filter((role) => typeof role === "string") }
+                : {}),
+        };
+    }
+    catch (error) {
+        console.error("[caretcms] Identity adapter authentication failed; access denied.", error);
+        return null;
+    }
+}
 export async function onRequest(context, next) {
     const services = await getRuntimeServices();
     const runtimeEnv = await resolveRuntimeEnv();
+    const request = context.request ?? new Request("http://localhost/");
     let adapter = services.adapter;
     let uploadHandler = services.uploadHandler;
     let sessionId = null;
@@ -87,14 +114,22 @@ export async function onRequest(context, next) {
     let setCookieHeader = null;
     let overlayActive = false;
     const demoMode = isDemoModeEnabled(runtimeEnv);
+    const identity = demoMode
+        ? null
+        : await authenticateIdentity(services.identityAdapter, request);
+    if (identity)
+        editorId = identity.id;
+    else if (!demoMode && !services.identityAdapter) {
+        editorId = getEditorId(context);
+    }
+    const policyActive = !demoMode && services.identityAdapter?.authorize !== undefined;
     if (demoMode) {
-        const request = context.request ?? new Request("http://localhost/");
         const resolution = resolveDemoSession(context, request);
         sessionId = resolution.sessionId;
         setCookieHeader = resolution.setCookieHeader;
         if (services.adapter.makeSessionOverlay) {
             const overlay = await services.adapter.makeSessionOverlay(sessionId);
-            adapter = new SessionOverlayAdapter(services.adapter, overlay);
+            adapter = new SessionOverlayAdapter(services.adapter, overlay, false);
             overlayActive = true;
         }
         else {
@@ -104,13 +139,14 @@ export async function onRequest(context, next) {
             uploadHandler = await services.uploadHandler.makeSessionWrapper(sessionId);
         }
     }
-    else if (isPreviewRequest(context) && services.adapter.makeEditorOverlay) {
+    else if ((isPreviewRequest(context) || policyActive) && services.adapter.makeEditorOverlay) {
         // Draft/preview mode: an authenticated editor opting into preview reads and
         // writes through their per-editor overlay (the public site keeps seeing the
         // base). Keyed by the editor id from the session cookie; absent that (an
         // unauthenticated preview request), there's no editor session so we leave the
         // base adapter in place. Publish later flushes the overlay back to the base.
-        const id = getEditorId(context);
+        const id = identity?.id
+            ?? (services.identityAdapter ? null : getEditorId(context));
         if (id) {
             const overlay = await services.adapter.makeEditorOverlay(id);
             adapter = new SessionOverlayAdapter(services.adapter, overlay);
@@ -118,11 +154,31 @@ export async function onRequest(context, next) {
             editorId = id;
         }
     }
+    const decisions = new Map();
+    const authorize = async (action, collection, id) => {
+        const key = JSON.stringify([action, collection, id]);
+        if (!decisions.has(key))
+            decisions.set(key, (async () => {
+                if (!identity || typeof services.identityAdapter?.authorize !== "function")
+                    return false;
+                try {
+                    return (await services.identityAdapter.authorize({ identity: structuredClone(identity), request, action, collection, id })) === true;
+                }
+                catch {
+                    console.error("[caretcms] Authorization policy failed; access denied.");
+                    return false;
+                }
+            })());
+        return decisions.get(key);
+    };
     const requestContext = {
         adapter,
         uploadHandler,
         sessionId,
         editorId,
+        identity,
+        identityAuthoritative: services.identityAdapter !== null,
+        ...(policyActive ? { authorize } : {}),
         demoMode,
         overlayActive,
         runtimeEnv,
@@ -135,6 +191,7 @@ export async function onRequest(context, next) {
         // Mutate the live context object so the loaders see the gate during render.
         requestContext.editor = isEditor;
         context.locals.isEditor = isEditor;
+        context.locals.caretIdentity = identity;
         const inner = await next();
         const contentType = inner.headers.get("content-type") ?? "";
         const contentEncoding = inner.headers.get("content-encoding") ?? "";